[horde] horde auth suceeds, imp auth fails, user thinks he's not logged in

Chuck Hagenbuch chuck at horde.org
Wed Oct 26 15:26:25 PDT 2005


Quoting amy.rich at tufts.edu:

> We're using hordeauth to log our uses into imp.  If the IMAP server is down
> for some reason, the login to horde (via LDAP) succeeds, but the 
> login to IMAP
> fails.  Unfortunately, the screen that appears is misleading because it says
> "Login failed."  and presents the user with the Username/Password/language
> options.  This is dangerous for us since users may not realize that they have
> not been logged out of horde.  If a second user inputs his/her information at
> this subsequent login screen the result is person A's attributes with person
> B's mail.
>
> Is there any way to _force_ a horde logout if the imp login fails?

Why don't you just use IMP application auth?

-chuck

-- 
"But she goes not abroad in search of monsters to destroy." - John 
Quincy Adams


More information about the horde mailing list